Directory Classes/Security/

Lines of Code

Developers

Most Recent Commits

k-fish 2010-08-24 10:42 Rev.: 5057

Removed everything in trunk after move to git.

0 lines of code changed in 17 files:

• Classes/Security: Account.php (del), AccountFactory.php (del), AccountRepository.php (del), Context.php (del), ContextHolderInterface.php (del), ContextHolderSession.php (del), Exception.php (del), F3_FLOW3_Security_Aspect.php (del), F3_FLOW3_Security_Context.php (del), F3_FLOW3_Security_ContextHolderInterface.php (del), F3_FLOW3_Security_ContextHolderSession.php (del), F3_FLOW3_Security_Exception.php (del), F3_FLOW3_Security_RequestPattern.php (del), F3_FLOW3_Security_RequestPatternInterface.php (del), F3_FLOW3_Security_RequestPatternResolver.php (del), RequestPatternInterface.php (del), RequestPatternResolver.php (del)

robert 2010-08-18 09:42 Rev.: 4997

[+FEATURE] FLOW3 (Security): Implemented a convenience method for retrieving the currently logged in account from the Security Context. Resolves #9356

17 lines of code changed in 1 file:

• Classes/Security: Context.php (+17 -1)

k-fish 2010-08-13 16:21 Rev.: 4969

[-TASK] FLOW3: Removed @version keyword from files, resolves #8835.

0 lines of code changed in 7 files:

• Classes/Security: Account.php (-1), AccountFactory.php (-1), AccountRepository.php (-1), Context.php (-1), Exception.php (-1), RequestPatternInterface.php (-1), RequestPatternResolver.php (-1)

andi 2010-07-05 15:16 Rev.: 4761

[+FEATURE] FLOW3 (Security): Implemented the "Everybody" role that is always applied in the security context and configured in the policy. Resolves #8544.

12 lines of code changed in 1 file:

• Classes/Security: Context.php (+12 -3)

andi 2010-06-24 13:54 Rev.: 4624

* [+BUGFIX] FLOW3 (Security): Inheritance of roles works now again. Fixes #8427.
* [~TASK] FLOW3 (Security): Added a safeguard to catch syntax errors when loading the policy configuration.

25 lines of code changed in 1 file:

• Classes/Security: Context.php (+25 -1)

robert 2010-03-29 16:02 Rev.: 4020

[+FEATURE][+API] FLOW3 (Security): Created two new functions for the HashService: createSaltedMd5() and validateSaltedMd5(). Resolves #7054

18 lines of code changed in 1 file:

• Classes/Security: AccountFactory.php (+18 -3)

robert 2010-03-17 11:30 Rev.: 3973

[+BUGFIX] FLOW3 (Object): The object serializer now serializes only the properties of the target class if the given object is proxied.
[+BUGIFX] FLOW3 (Property): The property mapper now handles optional constructor arguments of target objects correctly.
[+BUGFIX] FLOW3 (Validation): The Generic Object Validator now also accepts NULL as a valid value.
[+BUGFIX] FLOW3 (Validation): The Validator Resolver now correctly builds validator conjunctions even recursively for properties of the given data type.

2 lines of code changed in 1 file:

• Classes/Security: Account.php (+2 -3)

k-fish 2010-03-15 13:10 Rev.: 3939

[+BUGFIX] FLOW3 (Security): Fixed the token duplication in the security context, fixes #6761.

26 lines of code changed in 1 file:

• Classes/Security: Context.php (+26 -30)

robert 2010-03-11 16:32 Rev.: 3929

[+BUGFIX] FLOW3 (Object): Removed the obsolete SessionRegistry which was causing trouble resulting in a drastically growing session file. Fixes #6761
[+BUGFIX] FLOW3 (Security): Fixed a bug which resulted in a non working Account Repository. Fixes #6787

10 lines of code changed in 1 file:

• Classes/Security: AccountRepository.php (+10)

robert 2010-03-10 18:57 Rev.: 3926

[+FEATURE] FLOW3 (Security): The new AccountFactory now allows for convenient creation of a new account with username and password. Resolves #5846
[+BUGFIX] FLOW3 (Property): Fixed the failing tests of the Property Mapper. Also replaced a few occurrences of $objectManager->get() by $objectManager->create()

303 lines of code changed in 3 files:

• Classes/Security: Account.php (new 170), AccountFactory.php (new 77), AccountRepository.php (new 56)

andi 2010-03-02 17:05 Rev.: 3897

[+TASK] FLOW3 (Security): The security context has now a method getParty() which returns the party of the first authenticated account. This method is e.g. used for runtime evaluations (current.party) in AOP or the security policy. Resolves #6135

18 lines of code changed in 1 file:

• Classes/Security: Context.php (+18 -1)

andi 2010-03-01 23:13 Rev.: 3895

[~TASK] FLOW3 (Security): Removed the security context holder session with its interface. The whole functionality is now available directly through the security context itself. Resolves #5851

135 lines of code changed in 1 file:

• Classes/Security: Context.php (+135 -12)

robert 2010-02-22 16:17 Rev.: 3837

[+FEATURE] FLOW3 (Object): Implemented a static object container which is automatically built. It's essentially a hardcoded version of the autowired and configured object dependencies - just a lot faster. Many tests are still missing, but the version in this commit should be mostly functional. Addresses #3740 and resolves #2123.
[!!!][~API] FLOW3 (Object): Heavily refactored the Object Manager and its tests. The most important change is the removal of the Object Factory whose create() method is now located in the Object Manager. Furthermore, the getObject() method has been renamed to get() and a few minor important API functions within the Object Manager have been modified. This commit also contains a script which allows for semi automatically migrating existing code to the new API (see ./flow3 migrate objectmanagerusage). Resolves #6562
[~TASK] FLOW3 (Configuration): The Configuration Manager and its YAML source now doesn't depend on the YAML package anymore but refers to a YAML parser class within the FLOW3 package. Resolves #6564.

1 lines of code changed in 1 file:

• Classes/Security: ContextHolderSession.php (+1 -17)

andi 2010-02-14 15:07 Rev.: 3826

[~TASK] FLOW3(Security): Replaced all occurrences of ACL by Policy. Resolves #6462

1 lines of code changed in 1 file:

• Classes/Security: Context.php (+1 -1)

robert 2010-02-02 13:12 Rev.: 3806

[~TASK] FLOW3 (Security): Removed the GrantedAuhorityInterface and replaced all uses of "Granted Authority" by "Role". Resolves #6317

12 lines of code changed in 1 file:

• Classes/Security: Context.php (+12 -12)

robert 2010-01-15 15:38 Rev.: 3643

[~TASK] FLOW3 (Documentation): Updated the Coding Guidelines: removed inconsistent exceptions from the general class naming rules. Also added the rule that names of aspect classes must end with "Aspect". Relates to #5658
[~TASK] Global: Renamed many classes and interfaces in order to be consistent with FLOW3's naming rules. A migration script to update third-party applications will follow soon. Resolves #5658

17 lines of code changed in 3 files:

• Classes/Security: ContextHolderInterface.php (+1 -1), ContextHolderSession.php (+11 -11), RequestPatternResolver.php (+5 -5)

robert 2009-11-24 10:20 Rev.: 3487

[+API] FLOW3 (AOP): Added the JoinPoint class to the supported API. Also added a new method "hasException()" to the JoinPoint implementation. Resolves #5480
[~TASK] FLOW3 (Cache): Set the log level of flushCachesByTag to DEBUG
[~FEATURE] FLOW3 (Security): Implemented a logging aspect which currently logs all relevant actions of the authentication mechanism. The advices are currently active regardless of the configured logging threshold. Addresses #5481
[~TASK] FLOW3 (Security): Removed getSecurityContext() from the Authentication Manager Interface ? it was not used anywhere.
[~CONFIGURATION] FLOW3 (Security): Removed the requestPatterns configuration from the default security configuration. This configuration was only an example and got in the way if one wanted to reuse the DefaultProvider configuration for other login controllers.
[~TASK] Fluid (ViewHelpers): Corrected some inline documentation in the FormViewHelper

3 lines of code changed in 1 file:

• Classes/Security: Context.php (+3 -2)

k-fish 2009-10-30 10:26 Rev.: 3380

[~TASK] FLOW3: Made all exceptions part of the public API, so they get documented properly.

1 lines of code changed in 1 file:

• Classes/Security: Exception.php (+1 -1)

k-fish 2009-10-22 18:22 Rev.: 3345

[~TASK] FLOW3: Added @api annotations on class level and adjusted CGL to explain class-level @api handling.

1 lines of code changed in 1 file:

• Classes/Security: Exception.php (+1)

k-fish 2009-09-24 10:46 Rev.: 3220

[~TASK] FLOW3 (Security): Fixed two @param annotations.

2 lines of code changed in 1 file:

• Classes/Security: ContextHolderSession.php (+2 -2)

andi 2009-09-23 12:25 Rev.: 3215

[+FEATURE] FLOW3 (Security): Implemented the logoutAction() in the authenctication controller
[+FEATURE] Fluid (ViewHelpers): Implemented an ifGrantedAuthority view helper
[~TASK] Fluid (ViewHelpers): Fixed some doc comments in the ifAccess view helper

16 lines of code changed in 1 file:

• Classes/Security: Context.php (+16)

k-fish 2009-09-16 14:36 Rev.: 3189

[~TASK] FLOW3: Fixed method parameter documentation found by new reflection service checks.
[+FEATURE] FLOW3 (Persistence): added removeAll() to base repository, resolves #3852.

5 lines of code changed in 3 files:

• Classes/Security: Context.php (+1 -1), ContextHolderInterface.php (+2 -2), ContextHolderSession.php (+2 -3)

andi 2009-07-21 12:34 Rev.: 2841

* [~TASK] FLOW3 (Security): Removed a debug statement.
* [~BUGFIX] FLOW3 (Object): The session registry now explicitly checks, if the session data is an array.

0 lines of code changed in 1 file:

• Classes/Security: ContextHolderSession.php (-1)

andi 2009-07-21 12:04 Rev.: 2840

* [~TASK] FLOW3 (Security): The security framework now uses the new session scope for its session data.
* [~TASK] FLOW3 (Security): Fixed some doc comments.

39 lines of code changed in 2 files:

• Classes/Security: Context.php (+8 -5), ContextHolderSession.php (+31 -58)

k-fish 2009-07-16 15:02 Rev.: 2813

[+TASK] FLOW3: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Fluid: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Kickstart: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHP6: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHPUnit: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Testing: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Welcome: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] YAML: Removed file level docblocks and @package/@subpackage annotations.

0 lines of code changed in 6 files:

• Classes/Security: Context.php (-8), ContextHolderInterface.php (-8), ContextHolderSession.php (-8), Exception.php (-8), RequestPatternInterface.php (-8), RequestPatternResolver.php (-8)

k-fish 2009-07-15 12:28 Rev.: 2794

[TASK] FLOW3: moved from @internal to @api, resolves #3883

0 lines of code changed in 5 files:

• Classes/Security: Context.php (-9), ContextHolderInterface.php (-4), ContextHolderSession.php (-12), RequestPatternInterface.php (-4), RequestPatternResolver.php (-2)

robert 2009-05-20 19:14 Rev.: 2293

* FLOW3: Marked all methods as @internal except those which are considered part of the official API. Resolves #1280
* TYPO3CR: Fixed two tests of the Storage\PDO\Search testcase.

31 lines of code changed in 5 files:

• Classes/Security: Context.php (+9), ContextHolderInterface.php (+4), ContextHolderSession.php (+12), RequestPatternInterface.php (+4), RequestPatternResolver.php (+2)

robert 2009-05-04 14:25 Rev.: 2189

* FLOW3: (MVC) Introduced a RequestInterface and a ResponseInterface and made sure those are used everywhere where the Request class was used before.
* FLOW3: (Documentation) Continued writing documentation for the MVC framework.

14 lines of code changed in 4 files:

• Classes/Security: Context.php (+3 -3), ContextHolderInterface.php (+2 -2), ContextHolderSession.php (+4 -4), RequestPatternInterface.php (+5 -5)

andi 2009-03-23 17:36 Rev.: 2025

FLOW3(Security):
* Refactored almost all unit tests. Now the TestPackage is not needed anymore for the security tests.
* Cleaned up the interfaces, as some method aren't needed anymore with the new tests.

Testing:
* fixed a bug in the BaseTestcase, that sometimes crashed class loading.

4 lines of code changed in 1 file:

• Classes/Security: RequestPatternResolver.php (+4 -6)

andi 2009-03-18 15:39 Rev.: 2013

FLOW3(Security):
* The login controller regenerates RSA keys, if they timed out. No exception anymore.
* The whole security package uses injectSettings() to load configuration settings now.
* Added the possibility to set openSSL options for the RSAWalletServicePHP in the FLOW3.yaml

3 lines of code changed in 1 file:

• Classes/Security: Context.php (+3 -4)

andi 2009-03-17 18:59 Rev.: 2005

FLOW3(Security):
* ACL-Voter now uses the new getGrantedAuthorites method from the security context
* fixed a problem with prallel authentication session. Now you can be logged on to more than one part of your installation at the same time.
TYPO3 Distribution:
* Adjusted the FLOW3.yaml according to the recent changes

62 lines of code changed in 1 file:

• Classes/Security: Context.php (+62 -37)

andi 2009-03-17 16:25 Rev.: 2004

FLOW3 (Security):
* made parallel authentication mechanisms possible. Now you can login to typo3 with a different mechanism than to flow3
* credentials are no longer stored in the session.
* the RSA keys are now stored in a cache with a TTL of 30.
* reinjectDependencies is now used when authentication tokens are retrieved from the session.
* Exception/Handler is not needed.
* the authentication tokens hold an authentication status now. Look at the TokenInterface for possible values.
* added a getTokensOfType() method to the security context.
* authentication entry points work now.
* Adjusted the security configuration in FLOW3.yaml (you have to enable security to test the new features)
* Access is now denied if no policy entry is found.
TYPO3 (Backend):
* renamed the property $viewObjectName to $defaultViewObjectName, according to latest changes.

80 lines of code changed in 2 files:

• Classes/Security: Context.php (+44 -33), ContextHolderSession.php (+36 -9)

andi 2009-02-08 21:03 Rev.: 1882

FLOW3 (Security): Implemented the RSA based Login-Controller. You can call it under: http://yourhost/flow3/login

4 lines of code changed in 1 file:

• Classes/Security: ContextHolderSession.php (+4)

robert 2009-01-28 13:04 Rev.: 1811

!!! Globally renamed all class files to the new shorter version. Resolves #2524
FLOW3: (Resource) Adapted the class loader and other related parts of FLOW3 to the new class filename convention
FLOW3: Moved the FLOW3 bootstrap into the F3\FLOW3 namepace

110 lines of code changed in 6 files:

• Classes/Security: Context.php (new 33), ContextHolderInterface.php (new 10), ContextHolderSession.php (new 35), Exception.php (new 8), RequestPatternInterface.php (new 9), RequestPatternResolver.php (new 15)

k-fish 2009-01-15 16:06 Rev.: 1749

FLOW3:
* fixed license name in @license annotation, fixes #2454

6 lines of code changed in 6 files:

• Classes/Security: F3_FLOW3_Security_Context.php (+1 -1), F3_FLOW3_Security_ContextHolderInterface.php (+1 -1), F3_FLOW3_Security_ContextHolderSession.php (+1 -1), F3_FLOW3_Security_Exception.php (+1 -1), F3_FLOW3_Security_RequestPatternInterface.php (+1 -1), F3_FLOW3_Security_RequestPatternResolver.php (+1 -1)

k-fish 2009-01-07 11:37 Rev.: 1707

FLOW3:
* changed license to LGPL v3 or later

84 lines of code changed in 6 files:

• Classes/Security: F3_FLOW3_Security_Context.php (+14 -7), F3_FLOW3_Security_ContextHolderInterface.php (+14 -7), F3_FLOW3_Security_ContextHolderSession.php (+14 -7), F3_FLOW3_Security_Exception.php (+14 -7), F3_FLOW3_Security_RequestPatternInterface.php (+14 -7), F3_FLOW3_Security_RequestPatternResolver.php (+14 -7)

k-fish 2008-12-10 15:39 Rev.: 1599

!!! 5.3.0alpha3 namespaces refactoring:
* changed namespace delimiter from :: to \
* all class references in namespaced code prepended by \

PHPUnit:
* adapted mock object handling to the new namespaces syntax

FLOW3:
* PropertyReflection now uses setAccessible() instead of array cast to access protected properties

PHPCR:
* added a missing interface already used for type hints

66 lines of code changed in 6 files:

• Classes/Security: F3_FLOW3_Security_Context.php (+9 -9), F3_FLOW3_Security_ContextHolderInterface.php (+7 -7), F3_FLOW3_Security_ContextHolderSession.php (+33 -33), F3_FLOW3_Security_Exception.php (+2 -2), F3_FLOW3_Security_RequestPatternInterface.php (+8 -8), F3_FLOW3_Security_RequestPatternResolver.php (+7 -7)

robert 2008-11-11 12:16 Rev.: 1481

* FLOW3: (Component) Renamed "component" to "object" - everywhere. That means we now have an Object Manager instead of a Component Manager, an Object Factory etc. Resolves #2119

Globally adjusted all code for the above change.

25 lines of code changed in 2 files:

• Classes/Security: F3_FLOW3_Security_ContextHolderSession.php (+16 -16), F3_FLOW3_Security_RequestPatternResolver.php (+9 -9)

robert 2008-11-07 16:25 Rev.: 1451

* FLOW3: (Security) Fixed the configuration usage in the Security Context class

2 lines of code changed in 1 file:

• Classes/Security: F3_FLOW3_Security_Context.php (+2 -2)

andi 2008-11-04 19:06 Rev.: 1428

This temporary fixes #1948 until we have a proper session scope. For now it only fixes the problem for UsernamePassword tokens (as this is the only token type we have at the moment)

33 lines of code changed in 1 file:

• Classes/Security: F3_FLOW3_Security_ContextHolderSession.php (+33)

(21 more)